<![CDATA[🔴 Critical: Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells]]>

<![CDATA[🔴 Critical: Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells]]>Google is warning of a renewed mass exploitation campaign targeting a known vulnerability in Oracle PeopleSoft, with activity observed across multiple sectors worldwide. The campaign has been linked to ShinyHunters and centers on the weaponization of CVE-2026-35273, a critical flaw rated CVSS 9.8 that can lead to unauthenticated remote code execution.

The vulnerability was first exploited as a zero-day, and attackers are now bypassing WAFs to exploit it and deploy web shells.

Affected product: Oracle PeopleSoft
Vulnerability: CVE-2026-35273 (CVSS 9.8, unauthenticated RCE)
Threat actor: ShinyHunters-linked activity
Initial exploitation: as a zero-day
Observed impact: mass exploitation across multiple sectors globally, WAF bypass, web shell deployment

Given the severity of the flaw and the active exploitation, organizations running Oracle PeopleSoft should prioritize patching and review their environments for signs of compromise, particularly web shell activity.

Source: The Hacker News
Is your organization running Oracle PeopleSoft, and if so, what steps are you taking to mitigate this threat?

]]>https://xploitlk.com/topic/475/critical-attackers-bypass-wafs-to-exploit-oracle-peoplesoft-flaw-and-deploy-web-shellsRSS for NodeTue, 27 Oct 2026 10:37:53 GMTSat, 26 Sep 2026 16:30:21 GMT60